TicketMaster

Search Ticketmaster events, venues, and attractions with Discovery API filters, market-aware queries, and copy-ready curl and shell helpers.

This skill appears internally consistent and low-risk for its stated purpose, but consider these practical points before installing: - Protect your TM_API_KEY: the API requires apikey as a query parameter (and the script uses it). Query parameters can leak into logs, shell history, process lists, or HTTP referrers. Avoid running example commands verbatim on shared machines and do not paste the key into chat or screenshots. Revoke the key if you suspect it was exposed. - Local memory folder: the skill uses ~/ticketmaster/ for saved defaults and logs. It declares it won't persist the API key, but you should inspect any files you create there and avoid saving secrets into those files. - Source provenance: the package lists a homepage but the registry source is 'unknown'. If you require stronger assurance, verify the skill bundle came from a trusted publisher or inspect the files yourself before enabling. - Platform behavior: ensure your agent platform does not leak environment variables or copy skill files to shared locations. The script itself only issues GETs to Ticketmaster and prints JSON, so operational risk is limited if you follow the above precautions.

Type: OpenClaw Skill Name: ticketmaster Version: 1.0.0 The TicketMaster skill is a legitimate tool designed to interface with the official Ticketmaster Discovery API for searching events, venues, and attractions. The included bash script (ticketmaster.sh) safely wraps curl commands using environment variables for authentication, and the documentation (SKILL.md, setup.md) provides clear security boundaries, such as restricting file access to a local directory (~/ticketmaster/) and explicitly forbidding purchase automation.